Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/B999A66AD54E11EE842E2F58C4F9AE02.roa
File:                     B999A66AD54E11EE842E2F58C4F9AE02.roa (raw, json)
Hash identifier:          4R6KFekI1OlC4+faHbJqTsr4TpX4rVlr3fmpBllEC3g=
Subject key identifier:   83:9D:34:6B:94:AA:21:02:B3:6F:B3:8D:8A:46:3F:9C:B9:65:7A:B0
Certificate issuer:       /CN=A9121821/serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E
Certificate serial:       01C5
Authority key identifier: 9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/B999A66AD54E11EE842E2F58C4F9AE02.roa
Signing time:             Fri 03 Jul 2026 05:30:48 +0000
ROA not before:           Fri 03 Jul 2026 05:30:48 +0000
ROA not after:            Sun 01 Nov 2026 00:00:00 +0000
asID:                     150736
IP address blocks:        103.77.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.crl
                          rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121821, serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E
        Validity
            Not Before: Jul  3 05:30:48 2026 GMT
            Not After : Nov  1 00:00:00 2026 GMT
        Subject: CN=6a474908-acf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3c:b9:82:b0:42:bf:c6:61:cb:22:86:5b:7c:
                    f4:e5:97:68:e6:54:58:51:a1:85:63:75:6e:09:46:
                    14:67:96:80:cf:09:35:e0:f5:98:a4:5b:27:fc:a1:
                    bc:68:85:b6:a0:82:05:b6:46:63:7a:73:1d:b9:94:
                    07:bb:28:f5:51:f2:b8:e8:3b:55:e8:76:d1:f6:90:
                    8a:0d:62:20:00:76:fc:6b:27:7c:fc:83:97:b6:cd:
                    c7:b2:af:f6:c7:76:21:09:d9:be:2f:9d:3e:84:44:
                    ad:86:03:13:33:1c:63:48:5e:fd:8c:b5:88:8e:45:
                    25:13:40:2c:29:c9:57:61:62:ae:0e:2d:4b:50:3b:
                    fe:bc:44:95:3f:5b:4c:03:7e:09:be:f7:29:db:8e:
                    c8:5c:e1:31:db:e1:a8:fc:e1:eb:37:98:bc:9c:a8:
                    1d:b9:6d:a9:40:38:4b:01:c3:5f:4c:49:78:a6:4a:
                    50:41:64:52:e0:64:5a:67:8e:c3:db:ee:f3:e5:5f:
                    5e:00:8e:59:d1:d1:cf:e0:45:df:ce:20:f7:bd:66:
                    50:94:8b:28:de:bb:3a:ae:24:b9:85:f7:ad:f1:29:
                    45:5e:62:f4:05:90:25:a4:c0:76:1b:9a:d1:63:7d:
                    29:ad:21:65:da:f4:9a:0f:80:c6:17:13:a3:2c:04:
                    67:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9D:34:6B:94:AA:21:02:B3:6F:B3:8D:8A:46:3F:9C:B9:65:7A:B0
            X509v3 Authority Key Identifier:
                keyid:9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/B999A66AD54E11EE842E2F58C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:9d:f0:a9:df:57:7a:c2:ab:80:b1:0b:23:34:41:b6:a6:8c:
         26:d1:03:56:d0:c2:6c:53:78:e6:fe:0d:27:19:8f:f5:26:42:
         4a:44:c6:b0:b5:74:7a:80:22:6a:d9:27:07:39:83:d5:f1:22:
         e6:02:7b:14:ba:7c:3c:3b:5a:48:92:3d:ba:95:90:6c:c7:45:
         9e:0d:6c:26:bd:42:3f:1c:ea:09:85:c5:d3:51:ca:30:14:85:
         78:58:3b:99:f0:8a:9d:25:ba:4d:09:ae:e4:0d:8a:7c:fd:08:
         44:e2:85:07:7a:d3:5a:f2:85:35:4c:41:1d:28:aa:7b:49:fd:
         31:ce:0c:9c:d5:e8:8f:63:9f:59:5a:d5:54:6a:b8:1d:dc:72:
         8c:a0:63:f8:36:8c:0d:3a:11:69:6a:45:c2:b8:8d:3c:19:46:
         af:99:82:65:df:c6:7d:40:2e:ec:af:a2:81:b8:f3:08:ce:c8:
         e4:16:71:00:fa:34:40:9a:8c:4d:d4:74:27:5a:76:91:5a:76:
         42:f1:fc:17:a7:8c:63:28:8b:aa:f6:f0:b8:23:7c:41:0b:5c:
         57:bc:c7:d7:7d:79:67:70:db:3d:ca:15:cb:e0:db:b1:b4:0d:
         52:3f:ac:1b:d2:68:7f:b6:ab:aa:f3:77:a6:6d:97:83:db:23:
         ac:6c:a9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:20:28 2026 by rpki-client